This Privacy Policy explains how 3dfusionstudio ("Steplot", "we", "us" or "our") collects, uses and protects personal data in connection with the Steplot mobile application, web dashboard and related services (the "Service"). Questions about this policy may be sent to support@steplot.com.
1. Our role
We act as the controller of personal data relating to account holders and their users, such as account, payment and usage data.
Where you use the Service to process information about your own customers, such as photographs of their properties and notes about their requirements, we process that information on your behalf as a processor. You are responsible for having a lawful basis for collecting it and for informing your customers as required by law.
2. Personal data we collect
- Account data: names and email addresses of account owners and users, company name, role, and sign-in records.
- Job content: photographs, notes, designs and the images generated by the Service.
- Location data: the precise location at which each photograph is taken in the app, the accuracy of that reading, and whether the device reported the location as simulated.
- Device and sensor data: readings recorded with each photograph, such as device orientation, compass heading and camera lens characteristics.
- Payment data: amount, date and payment reference for each transaction. Card details are collected directly by our payment processor and are not received or stored by us.
- Technical data: IP address, device type, operating system, app version and server logs.
3. Location data
The app requires access to the device's precise location in order to take site photographs. Location is read only while a photograph is being taken. The app does not collect location in the background or track users' movements.
Location data is used to:
- calculate the position of the sun at the site, so that shade and lighting are shown accurately; and
- confirm that each Job relates to a single site. A Job's site is set from its first photograph. Photographs taken more than 200 metres from that site prompt the user to start a new Job and may be reviewed by our staff.
Location data is not shared with the providers that generate images.
4. How we use personal data and our legal bases
- To provide the Service, including storing and synchronising Jobs, generating images and providing support. Legal basis: performance of our contract with you.
- To process payments, issue invoices and keep accounting records. Legal basis: performance of contract and compliance with legal obligations.
- To secure the Service and prevent misuse, including verifying that Jobs relate to a single site and that free trials are used once. Legal basis: our legitimate interests in protecting the Service and its fair use.
- To send service communications about your account, purchases and changes to our terms. Legal basis: performance of contract and our legitimate interests.
We do not sell personal data and do not use it for advertising or for profiling.
5. Disclosure to third parties
We share personal data only with service providers acting on our instructions and bound by contractual confidentiality and data protection obligations:
- a payment processor, to take payments;
- artificial intelligence image processing providers, to generate images from photographs and designs;
- cloud hosting and storage providers; and
- an email delivery provider.
We may also disclose personal data where required by law or to establish, exercise or defend legal claims.
6. International transfers
Our service providers may process personal data outside your country, including in India, the United States and the European Union. Where required by applicable law, we put in place appropriate safeguards for these transfers, such as standard contractual clauses.
7. Retention
We retain account data and Job content, including location data, for as long as the account remains active. When an account is closed, we delete its Job content within 90 days. Records we are required to keep for tax and accounting purposes are retained for the period required by law.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and restricted staff access. Photographs are served only to authorised users of the account to which they belong.
9. Your rights
Depending on where you are located, you may have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact support@steplot.com.
Location access can be withdrawn at any time in the device's settings. Without it, site photographs cannot be taken in the app.
10. Cookies
The web dashboard uses only cookies that are strictly necessary to keep users signed in and to protect forms against misuse. We do not use advertising or analytics cookies.
11. Children
The Service is intended for businesses and is not directed at children.
12. Changes to this policy
We may update this policy from time to time. The current version and its effective date are published on this page, and we will notify account owners of material changes by email.